CVE-2019-18215: comodo comodo_internet_security Uncontrolled Search Path Element

Vulnerability summary

CVE-2019-18215 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in comodo comodo_internet_security. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 18-11-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

An issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL Preloading vulnerability allows an attacker to implant an unsigned DLL named iLog.dll in a partially unprotected product directory. This DLL is then loaded into a high-privileged service before the binary signature validation logic is loaded, and might bypass some of the self-defense mechanisms.

• CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.